Full Disclosure mailing list archives
GLSA: (200302-12)
From: Daniel Ahlberg <aliz () gentoo org>
Date: Sat, 22 Feb 2003 19:48:28 +0100
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - --------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNCEMENT 200302-12 - - --------------------------------------------------------------------- PACKAGE : webmin SUMMARY : unauthorized access DATE : 2003-02-22 18:48 UTC EXPLOIT : remote VERSIONS AFFECTED : <=1.060 FIXED VERSION : 1.070 - - --------------------------------------------------------------------- - From announcement: "Due to a remotely exploitable security hole being discovered that effects all previous Webmin releases, version 1.070 is now available for download from http://www.webmin.com/ and mirror sites. This problem was reported by Cintia M. Imanishi, but fortunately there have been no known malicious exploits of it yet. However, all users should upgrade to 1.070 as soon as possible." Read the full announcement at: http://marc.theaimsgroup.com/?l=webmin-announce&m=104587858408101&w=2 SOLUTION It is recommended that all Gentoo Linux users who are running app-admin/webmin upgrade to webmin-1.070 as follows: emerge sync emerge -u webmin emerge clean - - --------------------------------------------------------------------- aliz () gentoo org - GnuPG key is available at http://cvs.gentoo.org/~aliz - - --------------------------------------------------------------------- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+V8XxfT7nyhUpoZMRAvRGAJ4rPNH0gzC7Fk6PupQypzJYtGcQGACdG2o+ tsZUEcOGkalsQl+Ubn29GZA= =F8OA -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- GLSA: (200302-12) Daniel Ahlberg (Feb 22)